Glossary
LUKS (disk encryption)
The standard Linux format for full-disk encryption, securing data at rest on a block device behind a passphrase or key.
LUKS (Linux Unified Key Setup) is the standard format for block-device encryption on Linux. It encrypts an entire partition or disk, protecting data at rest so that a lost or stolen drive reveals nothing without the passphrase or key. LUKS stores key material in a header supporting multiple key slots, allowing several passphrases for one volume.
It is managed with cryptsetup, for example cryptsetup luksFormat /dev/sdX, and underlies the encrypted-volume option in most Linux installers.